Date: Sun, 22 Feb 2004 04:31:44 -0800 (PST) From: Pawel Jakub Dawidek <pjd@FreeBSD.org> To: src-committers@FreeBSD.org, cvs-src@FreeBSD.org, cvs-all@FreeBSD.org Subject: cvs commit: src/sys/security/mac mac_system.c src/sys/kern kern_sysctl.c src/sys/sys mac.h mac_policy.h src/sys/security/mac_biba mac_biba.c src/sys/security/mac_lomac mac_lomac.c src/sys/security/mac_stub mac_stub.c ... Message-ID: <200402221231.i1MCVivj058513@repoman.freebsd.org>
next in thread | raw e-mail | index | archive | help
pjd 2004/02/22 04:31:44 PST
FreeBSD src repository
Modified files:
sys/security/mac mac_system.c
sys/kern kern_sysctl.c
sys/sys mac.h mac_policy.h
sys/security/mac_biba mac_biba.c
sys/security/mac_lomac mac_lomac.c
sys/security/mac_stub mac_stub.c
sys/security/mac_test mac_test.c
Log:
Reimplement sysctls handling by MAC framework.
Now I believe it is done in the right way.
Removed some XXMAC cases, we now assume 'high' integrity level for all
sysctls, except those with CTLFLAG_ANYBODY flag set. No more magic.
Reviewed by: rwatson
Approved by: rwatson, scottl (mentor)
Tested with: LINT (compilation), mac_biba(4) (functionality)
Revision Changes Path
1.149 +15 -15 src/sys/kern/kern_sysctl.c
1.103 +3 -4 src/sys/security/mac/mac_system.c
1.76 +5 -11 src/sys/security/mac_biba/mac_biba.c
1.29 +5 -11 src/sys/security/mac_lomac/mac_lomac.c
1.40 +2 -2 src/sys/security/mac_stub/mac_stub.c
1.43 +2 -2 src/sys/security/mac_test/mac_test.c
1.56 +4 -3 src/sys/sys/mac.h
1.50 +5 -3 src/sys/sys/mac_policy.h
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?200402221231.i1MCVivj058513>